另一个Win32:Zhelatin-ASX

qianwenxiang

Win32:Zhelatin-ASX [Wrm]


跟上一个CRC不同..来自http://merrychristmasdude.com/sony.exe

另一个 http://merrychristmasdude.com/stripshow.exe 失效。

FROM INFOWORLD

The e-mails contain titles such as "Find Some Christmas Tail," "Warm Up this Christmas" and "Mrs. Clause Is Out Tonight!"
One message reads "Yo, I am pretty sure this is up your alley, from the things you have told me before. This will be the best 2 min you spend this holiday. hehe."
Once the user clicks on the link to Merrychristmasdude.com, he is taken to a Christmas-themed Web site with photos of scantily clad women and offered a free download. That download is a malicious program, called Email-Worm.Win32.Zhelatin.pd by F-Secure, that connects to a P-to-P (peer-to-peer) network and begins downloading even more malware.
Storm's creators have built up networks of infected PCs -- called botnets -- over the past year by using a combination of sophisticated hacking tricks to avoid detection and by spamming potential victims with clever and timely e-mail messages. The network is called Storm because its original messages offered victims video of the deadly storms that battered Europe a year ago, but has also perfected the tactic of sending out holiday-themed messages.

曲中求

Kitman

Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:         bbs.kafan.cn/attachment.php?aid=178104
Information:         Is the Trojan horse TR/Crypt.XDR.Gen


Generated by AntiVir WebGuard 7.01.00.13, AVE 7.6.0.46, VDF 7.0.1.184

leonfg

ESET
C:\Documents and Settings\GUNDAM\桌面\sony.rar » RAR » sony.exe - Win32/Nuwar.BF worm

海蜇皮

avast 砍杀！

Graybird

Starting the file scan:

Begin scan in 'E:\sony.rar'
E:\sony.rar
  [0] Archive type: RAR
  --> sony.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [INFO]      The file was deleted!

傻猪猪米走鸡

D:\firefox download\sony.rar » RAR » sony.exe - Win32/Nuwar.BF worm

soul20010

结果: 找到 1 恶意软件
Email-Worm.Win32.Zhelatin.qa (病毒)
C:\Documents and Settings\028222\桌面\sony.rar\sony.exe

无尽藏海

蜘蛛

will

Win32:Zhelatin-ASX [Wrm]